Open-source terminal AI agent for coding, deep research, automation, and multi-platform task execution.
Open-source terminal AI agent that codes, researches, browses, and solves — with real hands.
AURIX is a developer-first AI workspace that lives in your terminal.
It inspects repos, edits files, runs commands, performs cited research, automates stealth browsers
with built-in CAPTCHA solving, generates documents — and stays accessible from Discord, Telegram, and WhatsApp.
AURIX is an Autonomous Multi-Agent AI Workspace. It is not a chat wrapper — it is an AI that has hands, eyes, and memory.
Instead of just generating text, AURIX operates directly inside your environment to close the execution loop. It comes packed with 46+ built-in tools, a Rust-powered token counter for accurate context management, a stealth browser engine with CAPTCHA solving, and 100+ CTF/security skills for offensive security testing.
AURIX ships with CloakBrowser — a patched Chromium with source-level anti-detection that passes reCAPTCHA scoring, Cloudflare Turnstile, and fingerprint checks. The built-in CAPTCHA solver handles:
| CAPTCHA Type | Method | Success Rate |
|---|---|---|
| reCAPTCHA v2 | Hybrid solver: image grid AI vision + audio bypass (Whisper STT) with human-like clicking | 95%+ hybrid mode |
| hCaptcha | Same image grid solving flow | ~80% with vision model |
| Cloudflare Turnstile | Managed challenge auto-click | ~90% |
| FunCaptcha (Arkose Labs / Microsoft) | Puzzle type detection + rotation, drag-drop, image-match solving | ~75% |
| GeeTest / MTCaptcha | Slider drag with human-like easing + micro-jitter | ~85% |
| Text CAPTCHA | Screenshot + OCR via AI vision | ~95% |
NEW: Hybrid Audio + Image Solver — AURIX now supports a hybrid captcha solving mode:
# config.yaml
captchaAudio: "hybrid" # "image" / "audio" / "hybrid"
groqApiKey: gsk_xxx # Get free key: https://console.groq.com/docs/speech-to-text
Best model for CAPTCHA: Use Gemini — Google owns both reCAPTCHA and Gemini, so Gemini understands reCAPTCHA's image challenges better than any other model. Any vision-capable model works. Non-vision models auto-switch to audio mode.
New browser actions: captcha-grid, click-tile, captcha-verify, drag-to, hold-click — all with human-like mouse behavior (eased curves, random delays, micro-jitter).
Token counting was wildly inaccurate (Math.ceil(text.length / 4) underestimates by 30-60% for code). Now uses a native Rust BPE tokenizer via napi-rs:
cl100k_base (GPT-4) and o200k_base (GPT-4o) encodingsresponse.usage.promptTokens / completionTokensBundled with comprehensive offensive security skills covering every CTF category:
| Category | Files | Covers |
|---|---|---|
| Web | 20 | SQLi, XSS, SSTI, SSRF, JWT, prototype pollution, file upload RCE, 500+ techniques |
| Pwn | 18 | Buffer overflow, ROP, heap, format string, kernel exploitation, seccomp bypass |
| Crypto | 16 | RSA, AES, ECC, PRNG, ZKP, lattice, Coppersmith, padding oracle |
| Reverse | 18 | ELF/PE analysis, VMs, WASM, obfuscation, game clients |
| Forensics | 14 | Disk images, memory dumps, PCAP, steganography, event logs |
| Misc | 12 | Jails, encodings, RF/SDR, esoteric languages, game theory |
| Malware | 3 | C2 traffic, packers, .NET analysis |
| OSINT | 3 | Social media, geolocation, DNS, public records |
| AI/ML | 3 | Adversarial examples, prompt injection, model extraction |
The biggest upgrade yet — AURIX now solves CAPTCHAs using a hybrid approach:
using_tools: $command instead of generic "Writing response..."# Install with hybrid captcha support
npm i -g aurix-ai
# Setup Groq API key for audio bypass (free 2000 req/day)
# Get key at: https://console.groq.com/docs/speech-to-text
aurix setup
using_tools: $tool_name format/mcp)Full Model Context Protocol integration — connect external tool servers directly into AURIX:
/mcp # Open interactive TUI manager
/mcp presets # Browse built-in server presets (GitHub, Gmail, PostgreSQL, etc.)
/mcp catalog # Search online MCP server catalog
/mcp connect # Add a server from presets
/mcp reload # Restart all running MCP servers
When you save something to memory, AURIX rephrases it with an LLM before storing — making memories 2-5x richer with implicit context:
You say: "kenapa pupuk ga boleh kebanyakan"
Stored: "User menanyakan tentang batas dosis pemupukan pada tanaman —
kelebihan pupuk menyebabkan burn akar, akumulasi garam tanah,
dan gangguan penyerapan air akibat osmotic stress"
Automatic version check against npm registry on startup. If a newer version exists:
╭──────────────────────────────────────────────╮
│ New version available! 2.9.1 → 2.9.7 │
│ Run: npm update -g aurix-ai │
╰──────────────────────────────────────────────╯
AURIX now detects your operating system and adjusts its command cheatsheet:
ls, grep, cat, find) — uses PowerShell equivalentssed, find, xargs behavior)node:ffi availability, conditional flag injectionYou: "Look at
auth.ts. There's a bug where JWT tokens expire too early. Fix it, run the test suite, and if it passes, push it." AURIX: Reads the file, edits the code, runs tests, sees an error, fixes it, runs again, executesgit push.
You: "Write a 5-page PDF report on how Vercel alternatives are perceived on Reddit and HackerNews." AURIX: Spawns a 13-agent research pipeline. Scrapes forums, debates claims, compiles data into markdown, converts to styled PDF.
You: "Go to this site, fill the registration form, solve whatever CAPTCHA pops up, and submit." AURIX: Opens stealth browser, fills form, detects reCAPTCHA image challenge, screenshots each tile, uses vision to pick matching images, clicks verify.
You: "Here's a challenge file. Find the flag." AURIX: Triages the file, categorizes it (crypto? web? pwn?), loads the matching Bug Hunt sub-skill, applies specialized techniques, captures the flag.
/mcp with interactive TUI.> install skill from github.com/user/awesome-skill — clones, validates, and rebuilds without restarting.ls on Windows, no dir on Linux).AURIX is powered by a LangGraph-based architecture that orchestrates multiple specialized AI agents:
The fastest way to get started. Works on any machine with Node.js 22+.
npm install -g aurix-ai
Then run:
aurix setup # Configure LLM provider + API key (first time only)
aurix # Launch the terminal AI workspace
That's it. The aurix command is now available globally in your terminal.
To update later:
npm update -g aurix-ai
Use this method if you want to modify the source code or contribute.
git clone https://github.com/DekaPrayoga/AurixAgent.git
cd AurixAgent
npm install # installs dependencies + builds Rust token counter
npm run build # compiles TypeScript
npm link # links `aurix` command to your PATH
After linking, aurix works from any directory:
aurix setup
aurix
The npm package ships with a pre-built .node binary (7.2 MB). If you install from source and have Rust installed, the postinstall script automatically builds it via napi-rs.
Why does the Rust build directory take ~150 MB? The target/release/deps/ folder contains ~147 MB of intermediate .rlib compilation files — one for every crate in the dependency tree (tiktoken-rs embeds the full BPE vocabulary of 100k+ tokens). The final compiled binary is only 7.2 MB, and that's the only file included in the npm package.
If Rust is not available, the agent falls back to a JS-based token counter automatically — no functionality is lost, just slightly less accurate counting.
# Install Rust (if not already installed)
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
# Then rebuild the native module
cd native/token-counter
npx napi build --release --platform
aurix setup # Configure LLM provider, API key, model
aurix # Launch the terminal AI workspace
aurix gateway # Run as Discord/Telegram/WhatsApp bot
aurix sessions # List previous sessions
aurix --resume ID # Resume a specific session
aurix update # Update to latest version
aurix --help # Show all commands
src/
agent/ Core agent loop, context, memory, TokenCounter
tools/ 46+ tools (Browser, Research, Docker, Git, etc.)
mcp/ MCP client, registry, catalog, tool adapter
cli/ Terminal UI (React Ink + raw stdin TUI)
gateway/ Discord / Telegram / WhatsApp integration
providers/ LLM providers (OpenAI, Anthropic, LangChain)
skills/ Skill registry and loader
utils/ Update check, ASCII logo, helpers
native/
token-counter/ Rust BPE tokenizer (tiktoken-rs via napi-rs)
Cargo.toml Rust crate config
src/lib.rs count_tokens(), count_tokens_batch()
skills/
bug-hunt/ 100+ CTF & security testing skills
ctf-web/ Web exploitation (SQLi, XSS, SSTI, SSRF, JWT...)
ctf-pwn/ Binary exploitation (ROP, heap, kernel...)
ctf-crypto/ Cryptography (RSA, AES, ECC, PRNG, ZKP...)
ctf-reverse/ Reverse engineering (ELF/PE, VMs, WASM...)
ctf-forensics/ Forensics (disk, memory, PCAP, stego...)
ctf-misc/ Jails, encodings, RF/SDR, game theory
ctf-malware/ Malware analysis (C2, packers, .NET)
ctf-osint/ OSINT (social media, geolocation, DNS)
ctf-ai-ml/ AI/ML security (adversarial, prompt injection)
ctf-writeup/ Write-up generator
| Category | Capabilities |
|---|---|
| File & Code | Read, write, edit, search files, terminal exec, code sandbox |
| Browser | Stealth Chromium (CloakBrowser), CAPTCHA solving (reCAPTCHA, hCaptcha, FunCaptcha, Turnstile, GeeTest, sliders), drag-to, hold-click, persistent profiles |
| Web | Web search, scraper, YouTube |
| Office | PDF, Excel, PowerPoint generation, SMTP Email |
| DevOps | Docker, VPS management, deployments, cloud provisioning |
| Finance | Trading analysis, EVM/Solana blockchain tools |
| Security | Bug Hunt skills (100+ CTF techniques), OSINT, vulnerability scanning |
| Creative | GIF search, text humanizer, architecture diagrams |
| Utility | Maps, notifier, music player, todo, memory |
| GitHub | PR creation, issue management, repo info |
| MCP | Full MCP server manager with interactive TUI, subprocess transport, auto-tool registration, online catalog |
| Planning | Project planning, Kanban, story decomposition |
AURIX can install new skills from any GitHub repository at runtime:
> install skill from github.com/user/awesome-skill
It clones, validates, registers, and rebuilds automatically. No restart needed.
Tip: For best CAPTCHA solving results, use a vision-capable model with 700B+ parameters. Gemini excels at reCAPTCHA since Google built both systems.
cp .env.example .env
Key variables:
OPENAI_API_KEY — OpenAI accessANTHROPIC_API_KEY — Anthropic accessDISCORD_TOKEN — Discord bot gatewayTELEGRAM_BOT_TOKEN — Telegram gatewayBRAVE_API_KEY — Enhanced web search (optional)MIT
FAQs
Open-source terminal AI agent for coding, deep research, automation, and multi-platform task execution.
The npm package aurix-ai receives a total of 2,230 weekly downloads. As such, aurix-ai popularity was classified as popular.
We found that aurix-ai demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.
Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.